$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa File: 3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa (raw, json) Hash identifier: YzeL+OCAalusbn1m5HXWAoI2WeWiRzCYeg8Gq0Aletw= Subject key identifier: CD:23:89:D7:E1:61:65:09:8F:D0:09:C1:95:4D:38:E8:80:B5:18:9C Certificate issuer: /CN=061065EDF2843A4462114BCE0A173E21A84A019E Certificate serial: 42A69DDC227132DAD9D162809951683D2A679EDB Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa Signing time: Thu 07 Aug 2025 04:00:00 +0000 ROA not before: Thu 07 Aug 2025 03:55:00 +0000 ROA not after: Thu 06 Aug 2026 04:00:00 +0000 asID: 139952 IP address blocks: 103.174.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a6:9d:dc:22:71:32:da:d9:d1:62:80:99:51:68:3d:2a:67:9e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E Validity Not Before: Aug 7 03:55:00 2025 GMT Not After : Aug 6 04:00:00 2026 GMT Subject: CN=CD2389D7E16165098FD009C1954D38E880B5189C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fc:55:7c:d8:83:48:70:bb:1e:d4:83:23:4e: bf:52:cc:b3:fe:71:b7:8b:28:b5:f5:eb:d5:01:68: e1:1f:62:ce:04:da:be:81:49:5e:d8:42:dc:c2:c9: a9:a1:01:b2:27:b9:38:c3:ce:17:aa:47:25:65:72: a2:47:f0:d9:36:c0:11:e7:e2:cd:d3:d2:2d:56:4c: 6b:e5:53:f9:4a:ee:be:bc:e0:be:6a:aa:14:be:ac: 57:c5:da:9f:0d:55:62:ea:3c:02:f4:4c:04:6f:f7: 7c:cd:ec:88:ae:96:a9:82:d7:0a:89:b5:7f:89:86: ea:46:59:11:41:4c:59:0c:95:25:24:75:03:96:be: e3:f1:f9:65:82:3b:d9:be:b4:8c:15:59:6d:a8:62: a1:a0:90:e0:37:7c:05:e1:7f:f2:45:15:78:83:8d: e8:0a:8d:66:3b:3d:49:25:57:9d:8f:d8:5d:b9:db: a8:5e:89:eb:56:d5:97:8a:ef:e8:dc:71:8c:cd:1e: ca:98:99:25:82:2d:9f:0d:87:24:6f:00:38:11:1a: 66:eb:08:8c:f5:14:da:9c:97:b4:05:70:31:44:13: f2:c0:dd:fd:45:c9:6b:d3:4f:d5:03:e7:76:cb:d2: 60:6e:bf:8a:53:bc:4e:83:78:b1:bf:b9:1a:a4:fb: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:23:89:D7:E1:61:65:09:8F:D0:09:C1:95:4D:38:E8:80:B5:18:9C X509v3 Authority Key Identifier: keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32332d3233203d3e20313339393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.112.0/23 Signature Algorithm: sha256WithRSAEncryption ce:70:29:6a:a5:8f:ac:08:41:13:4c:7b:5e:ee:10:b1:dc:4d: da:16:7b:8f:bd:ff:59:c0:7c:a9:f8:36:24:90:2a:3f:70:a9: d2:f1:38:a7:10:b3:95:1e:cc:62:04:ee:0f:11:01:e8:99:29: 34:76:c8:88:5c:31:a7:94:d8:00:70:d7:4a:1c:f8:56:45:e3: db:ca:b7:fd:51:39:73:ed:b7:ba:15:37:7d:c4:ad:52:76:0c: d1:e0:42:ff:3a:69:82:e4:32:29:85:52:4a:52:2a:5b:27:77: 11:3d:0d:1c:65:78:8f:72:a9:d4:f6:8e:65:61:39:c3:78:1c: a9:d8:7f:8f:13:bc:96:35:57:b5:2c:8f:ae:04:ec:10:ab:28: e8:94:12:81:9c:88:f3:d1:5e:61:d3:af:5e:86:66:9b:f3:a7: 26:57:51:e9:21:ad:d1:57:3f:df:f3:eb:84:af:1a:f3:12:ba: d5:dc:d6:ae:88:b6:42:b8:7a:80:62:a3:56:13:14:0f:79:1b: b5:75:d6:cb:a5:98:8d:1a:e8:2e:5e:5e:a0:b3:d9:1c:f7:3f: 8e:20:fe:7f:fe:1e:90:a2:02:be:04:a2:70:3c:62:a1:2a:3e: aa:ec:6d:d3:79:a6:65:3e:83:b2:67:13:d0:7b:f5:57:b7:5a: 25:76:7c:85 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQqad3CJxMtrZ0WKAmVFoPSpnntswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFB ODRBMDE5RTAeFw0yNTA4MDcwMzU1MDBaFw0yNjA4MDYwNDAwMDBaMDMxMTAvBgNV BAMTKENEMjM4OUQ3RTE2MTY1MDk4RkQwMDlDMTk1NEQzOEU4ODBCNTE4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/FV82INIcLse1IMjTr9SzLP+ cbeLKLX169UBaOEfYs4E2r6BSV7YQtzCyamhAbInuTjDzheqRyVlcqJH8Nk2wBHn 4s3T0i1WTGvlU/lK7r684L5qqhS+rFfF2p8NVWLqPAL0TARv93zN7IiulqmC1wqJ tX+JhupGWRFBTFkMlSUkdQOWvuPx+WWCO9m+tIwVWW2oYqGgkOA3fAXhf/JFFXiD jegKjWY7PUklV52P2F2526heietW1ZeK7+jccYzNHsqYmSWCLZ8NhyRvADgRGmbr CIz1FNqcl7QFcDFEE/LA3f1FyWvTT9UD53bL0mBuv4pTvE6DeLG/uRqk+9IfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUzSOJ1+FhZQmP0AnBlU046IC1GJwwHwYDVR0j BBgwFoAUBhBl7fKEOkRiEUvOChc+IahKAZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzM2MjRjNC1iZmRjLTRlNDgtOGVhMC1lYjA1NjA1YzYyMTMvMC8wNjEwNjVFREYy ODQzQTQ0NjIxMTRCQ0UwQTE3M0UyMUE4NEEwMTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDYxMDY1RURGMjg0M0E0NDYyMTE0QkNFMEExNzNFMjFBODRB MDE5RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMzYyNGM0LWJmZGMtNGU0OC04 ZWEwLWViMDU2MDVjNjIxMy8wLzMxMzAzMzJlMzEzNzM0MmUzMTMxMzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzkzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnrnAwDQYJ KoZIhvcNAQELBQADggEBAM5wKWqlj6wIQRNMe17uELHcTdoWe4+9/1nAfKn4NiSQ Kj9wqdLxOKcQs5UezGIE7g8RAeiZKTR2yIhcMaeU2ABw10oc+FZF49vKt/1ROXPt t7oVN33ErVJ2DNHgQv86aYLkMimFUkpSKlsndxE9DRxleI9yqdT2jmVhOcN4HKnY f48TvJY1V7Usj64E7BCrKOiUEoGciPPRXmHTr16GZpvzpyZXUekhrdFXP9/z64Sv GvMSutXc1q6ItkK4eoBio1YTFA95G7V11sulmI0a6C5eXqCz2Rz3P44g/n/+HpCi Ar4EonA8YqEqPqrsbdN5pmU+g7JnE9B79Ve3WiV2fIU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:44:35 2025 by rpki-client